The reasoning behind the lack of any "mass-scale attack" is that this exploit has existed for as long as the Apache logging feature has existed. It's just that it has been officially discovered only now. Malicious entities may have easily been using this exploit to acquire access to computers/servers/services for many years. So, uh, yeah, there isn't really much to "strap the fuck in" for when many people probably have been getting metaphorically ass-fucked in their sleep all this time.

The reasoning behind the lack of any "mass-scale attack" is that this exploit has existed for as long as the Apache logging feature has existed. It's just that it has been officially discovered only now. Malicious entities may have easily been using this exploit to acquire access to computers/servers/services for many years. So, uh, yeah, there isn't really much to "strap the fuck in" for when everyone has probably been getting metaphorically ass-fucked in their sleep all this time.